Certificate of Cloud Auditing Knowledge (CCAK) — Question 165

In a multi-level supply chain structure where cloud service provider A relies on other sub cloud services, the provider should ensure that any compliance requirements relevant to the provider are:

Answer options

• A. passed to the sub cloud service providers based on the sub cloud service providers’ geographic location.
• B. passed to the sub cloud service providers.
• C. treated as confidential information and withheld from all sub cloud service providers.
• D. treated as sensitive information and withheld from certain sub cloud service providers.

Correct answer: B

Explanation

The correct answer is B because compliance requirements must be communicated to sub cloud service providers to ensure adherence to regulations. Option A incorrectly ties compliance to geographic location, while options C and D suggest withholding important compliance information, which could lead to non-compliance and potential legal issues.